You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Teun Hoogendoorn (JIRA)" <ji...@apache.org> on 2016/01/05 14:21:39 UTC
[jira] [Commented] (DIRSERVER-2069) Failed to change password if
realm is not EXAMPLE.COM
[ https://issues.apache.org/jira/browse/DIRSERVER-2069?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15083038#comment-15083038 ]
Teun Hoogendoorn commented on DIRSERVER-2069:
---------------------------------------------
Ran into this exact issue.
The patch from Axlendar works.
> Failed to change password if realm is not EXAMPLE.COM
> -----------------------------------------------------
>
> Key: DIRSERVER-2069
> URL: https://issues.apache.org/jira/browse/DIRSERVER-2069
> Project: Directory ApacheDS
> Issue Type: Bug
> Reporter: Alexander Bersenev
> Attachments: realm.patch
>
>
> From verifyServiceTicket(protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/changepwd/service/ChangePasswordService.java):
> ChangePasswordConfig config = changepwContext.getConfig();
> ...
> String primaryRealm = config.getPrimaryRealm();
> ...
> if ( !ticket.getRealm().equals( primaryRealm ) || !serverPrincipal.getName().equals( changepwPrincipal.getName() ) )
> {
> throw new KerberosException( org.apache.directory.shared.kerberos.exceptions.ErrorType.KRB_AP_ERR_NOT_US );
> }
> The primary realm is always EXAMPLE.COM because an initialization of primaryRealm in ChangePasswordConfig was forgot.
> Attached one-string patch fixes it.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)